$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4af9227c-5b03-3294-9ff8-b4e25c39e237.roa File: 4af9227c-5b03-3294-9ff8-b4e25c39e237.roa (raw, json) Hash identifier: xN14NQnVtzn23XGPb42T4jTXoR+K8wHafaHmaTraOcU= Subject key identifier: F1:0B:3A:99:E0:F5:A2:A1:46:4A:2B:E9:A3:57:64:C0:F2:B8:82:B9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848CDE1049E16FDE9486DBFBD80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4af9227c-5b03-3294-9ff8-b4e25c39e237.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 397205 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:04:9e:16:fd:e9:48:6d:bf:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=14dcf190-2e64-44fe-8b26-d39e80edaace Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:24:28:67:dc:de:18:aa:9d:92:ab:d1:b8:e2: 3b:73:65:e9:3d:ce:8c:06:d6:36:d7:26:64:b8:10: 2a:26:8a:bb:4c:71:a9:3a:4d:02:86:23:28:81:27: 10:16:3f:c0:92:ba:b8:a4:46:9d:48:16:ca:3b:d6: 7b:95:ac:82:30:00:70:54:e6:f8:70:b5:0f:fd:27: 69:f7:21:91:55:6c:00:84:de:c6:16:88:2c:e9:43: 9b:2c:45:94:20:2a:73:af:c0:b3:5f:d0:b0:b9:61: c6:04:04:aa:5a:30:c7:ac:d3:a3:38:ec:e4:e5:4e: db:9e:35:d3:e7:de:13:b1:58:52:4a:67:97:70:ee: ff:f8:7c:7c:4c:c5:70:9b:b8:60:d6:55:21:34:ff: f0:2f:51:08:60:cc:0a:dd:2b:46:1d:f2:f9:7b:a8: cd:89:54:64:5a:33:d7:a2:44:f1:15:6f:33:db:38: c6:e7:0b:08:08:db:6d:9f:a2:72:bc:78:1a:a7:ad: e3:7e:2f:63:01:0f:93:10:54:8d:ad:06:c6:c3:43: 05:dd:89:c7:d5:c4:53:63:91:ea:9b:32:4a:02:a5: 75:cc:c0:0b:80:46:1c:9b:39:fd:8e:11:f5:f2:e9: 19:b9:71:b6:3a:eb:c2:9e:e4:ac:1a:73:0e:4c:2b: fd:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:0B:3A:99:E0:F5:A2:A1:46:4A:2B:E9:A3:57:64:C0:F2:B8:82:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4af9227c-5b03-3294-9ff8-b4e25c39e237.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:fc:4f:ad:f5:3b:70:d0:41:02:66:90:0b:d3:e3:ea:52:e5: 3f:e0:1f:bb:df:6d:c2:aa:ec:4c:ca:da:8a:07:03:a5:7a:99: 3c:31:7a:f2:c0:0a:8f:b9:35:9b:6c:61:f3:62:5d:29:58:36: 8e:57:56:4b:58:f6:05:13:fa:76:fe:2d:79:94:39:b9:c3:dc: 5c:42:37:c1:47:69:71:00:98:ae:7c:f5:30:be:e9:89:4e:4d: 42:32:fc:1b:ec:35:d4:c5:d4:ad:72:f0:3a:58:8e:cd:bc:1c: 27:b9:9c:88:df:c8:57:6c:2a:18:42:e3:8e:0e:64:f8:12:93: 8d:a7:ae:fe:3f:f2:f7:2b:ee:34:de:b1:e9:99:04:d9:63:77: d2:60:5d:a3:80:40:7a:76:b8:cf:56:5b:a3:d7:32:20:2d:d0: cc:80:67:0c:6b:e7:1a:d5:4b:4b:9a:b3:5f:36:24:4d:d6:bf: 54:cd:c5:b9:85:b2:42:96:5a:1a:a7:28:26:90:15:14:1f:be: 49:a3:a2:20:14:95:dd:0a:d8:ae:44:ef:a8:fa:fe:63:76:f5: ef:b5:eb:42:4b:86:7a:88:90:8f:09:f5:10:52:26:a8:16:f4: 0d:bc:b1:f2:13:3e:bb:0a:46:29:e0:d4:e1:f5:3d:50:60:ee: 56:6b:ce:f1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjN4QSeFv3pSG2/vYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk MTRkY2YxOTAtMmU2NC00NGZlLThiMjYtZDM5ZTgwZWRhYWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCQoZ9zeGKqdkqvRuOI7c2XpPc6MBtY21yZk uBAqJoq7THGpOk0ChiMogScQFj/Akrq4pEadSBbKO9Z7layCMABwVOb4cLUP/Sdp 9yGRVWwAhN7GFogs6UObLEWUICpzr8CzX9CwuWHGBASqWjDHrNOjOOzk5U7bnjXT 594TsVhSSmeXcO7/+Hx8TMVwm7hg1lUhNP/wL1EIYMwK3StGHfL5e6jNiVRkWjPX okTxFW8z2zjG5wsICNttn6JyvHgap63jfi9jAQ+TEFSNrQbGw0MF3YnH1cRTY5Hq mzJKAqV1zMALgEYcmzn9jhH18ukZuXG2OuvCnuSsGnMOTCv95wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPELOpng9aKhRkor6aNXZMDyuIK5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGFmOTIyN2MtNWIwMy0z Mjk0LTlmZjgtYjRlMjVjMzllMjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA0/E+t9Ttw0EECZpAL0+PqUuU/4B+7323CquxMytqKBwOlepk8MXry wAqPuTWbbGHzYl0pWDaOV1ZLWPYFE/p2/i15lDm5w9xcQjfBR2lxAJiufPUwvumJ Tk1CMvwb7DXUxdStcvA6WI7NvBwnuZyI38hXbCoYQuOODmT4EpONp67+P/L3K+40 3rHpmQTZY3fSYF2jgEB6drjPVluj1zIgLdDMgGcMa+ca1UtLmrNfNiRN1r9UzcW5 hbJClloapygmkBUUH75Jo6IgFJXdCtiuRO+o+v5jdvXvtetCS4Z6iJCPCfUQUiao FvQNvLHyEz67CkYp4NTh9T1QYO5Wa87x -----END CERTIFICATE-----Generated at Sun Apr 27 22:23:07 2025 by rpki-client